VYPR
← All advisories
Moderate severityNVD Advisory· Published Feb 19, 2024· Updated Mar 27, 2025

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

CVE-2024-26308

Description

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.

Users are recommended to upgrade to version 1.26, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.commons:commons-compressMaven
>= 1.21, < 1.26.01.26.0

Affected products

547

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.